CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 201:

  Fill in the blank: To create policy for traffic to or from a particular location, use the _____________.

  A. DLP shared policy

  B. Geo policy shared policy

  C. Mobile Access software blade

  D. HTTPS inspection

  Correct Answer: B

  Shared Policies The Shared Policies section in the Security Policies shows the policies that are not in a Policy package. They are shared between all Policy packages. Shared policies are installed with the Access Control Policy. Software Blade Description Mobile Access Launch Mobile Access policy in a SmartConsole. Configure how your remote users access internal resources, such as their email accounts, when they are mobile. Launch Data Loss Prevention policy in a SmartConsole. Configure DLP advanced tools to automatically identify data that must not go outside the network, to block the leak, and to educate users. Geo Policy Create a policy for traffic to or from specific geographical or political locations.

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_NexGenSecurityGateway_Guide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_NexGenSecurityGateway_Guide/137006

• Question 202:

  After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

  A. Security Gateway IP-address cannot be changed without re-establishing the trust

  B. The Security Gateway name cannot be changed in command line without re-establishing trust

  C. The Security Management Server name cannot be changed in SmartConsole without re-establishing trust

  D. The Security Management Server IP-address cannot be changed without re-establishing the trust

  Correct Answer: A

• Question 203:

  Which two Identity Awareness commands are used to support identity sharing?

  A. Policy Decision Point (PDP) and Policy Enforcement Point (PEP)

  B. Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)

  C. Policy Manipulation Point (PMP) and Policy Activation Point (PAP)

  D. Policy Activation Point (PAP) and Policy Decision Point (PDP)

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/66477.htm

• Question 204:

  True or False: In R80, more than one administrator can login to the Security Management Server with write permission at the same time.

  A. False, this feature has to be enabled in the Global Properties.

  B. True, every administrator works in a session that is independent of the other administrators.

  C. True, every administrator works on a different database that is independent of the other administrators.

  D. False, only one administrator can login with write permission.

  Correct Answer: B

  More than one administrator can connect to the Security Management Server at the same time. Every administrator has their own username, and works in a session that is independent of the other administrators. Reference: https:// sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/124265

• Question 205:

  Which one of the following is TRUE?

  A. Ordered policy is a sub-policy within another policy

  B. One policy can be either inline or ordered, but not both

  C. Inline layer can be defined as a rule action

  D. Pre-R80 Gateways do not support ordered layers

  Correct Answer: C

• Question 206:

  Which deployment adds a Security Gateway to an existing environment without changing IP routing?

  A. Distributed

  B. Bridge Mode

  C. Remote

  D. Standalone

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/86429.htm

• Question 207:

  Fill in the blank: An identity server uses a ___________ for user authentication.

  A. Shared secret

  B. Certificate

  C. One-time password

  D. Token

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62050.htm

• Question 208:

  You can see the following graphic:

  

  What is presented on it?

  A. Properties of personal .p12 certificate file issued for user John.

  B. Shared secret properties of John's password.

  C. VPN certificate properties of the John's gateway.

  D. Expired .p12 certificate properties for user John.

  Correct Answer: A

• Question 209:

  When configuring LDAP User Directory integration, Changes applied to a User Directory template are:

  A. Reflected immediately for all users who are using template.

  B. Not reflected for any users unless the local user template is changed.

  C. Reflected for all users who are using that template and if the local user template is changed as well.

  D. Not reflected for any users who are using that template.

  Correct Answer: A

  The users and user groups are arranged on the Account Unit in the tree structure of the LDAP server. User management in User Directory is external, not local. You can change the User Directory templates. Users associated with this template get the changes immediately. You can change user definitions manually in SmartDashboard, and the changes are immediate on the server. Reference: https://sc1.checkpoint.com/documents/R77/ CP_R77_SecurityManagement_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/94041

• Question 210:

  Choose what BEST describes the reason why querying logs now is very fast.

  A. New Smart-1 appliances double the physical memory install

  B. Indexing Engine indexes logs for faster search results

  C. SmartConsole now queries results directly from the Security Gateway

  D. The amount of logs been store is less than the usual in older versions

  Correct Answer: B